CVE-2024-24141

CVE-2024-24141: School-Task-Manager-System-SQLInjection-1 Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2024-27956-for-fscan

🛑CVE-2024-27956-for-fscan Thanks for PoC by diego-tella English This is a Yaml PoC rule of CVE-2024-27956 Wordpress Automatic SQLi for fscan. How to use: 1. Add the yml file to path:/fscan-main/WebScan/pocs. 2. Build the fscan's go files. 3. Start the fscan and enjoy. Attention: If the...

CVE-2024-24138

CVE-2024-24138: Online Timesheet App SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24138.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24138/blob/main/CVE-2024-24138.md...

cve-2021-29442-Nacos-Derby-rce-exp

Introduction Nacos Derby command execution vulnerability exploitation script, by default uses User-Agent bypass to exploit the vulnerability Nacos is an open-source platform for service registration, discovery, and configuration management. In its early versions ≤2.4.0-BETA, Nacos integrates Apac...

CVE-2024-13483

CVE-2024-13483 LTL Freight Quotes – SAIA Edition = 2.2.10 - Unauthenticated SQL Injection Description The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 2.2.10 due to...

CVE-2023-36143

CVE-2023-36143 Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...

CVE-2022-37202

CVE-2022-37202 CVE-2022-37202 POC Suggested description JFinal CMS 5.1.0 is vulnerable to SQL Injection. Vulnerability Type SQL Injection Vendor of Product the development group Affected Product Code Base https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 Affected Component These interfaces...

CVE-2011-2523

CVE-2011-2523 This was a vulnerability found in the vsFTPd 2.3.4 service, which through port 6200 performs a redirect giving way to an interactive shell, thus interpreting commands. https://www.exploit-db.com/exploits/49757...

CVE-2019-15107

Webmin Server Management Tool RCE Vulnerability CVE-2019-15107 Summary CVE-2019-15107 is a vulnerability in Webmin, a web-based system administration tool for Unix systems. In the code that changes passwords, a specific parameter is passed directly to a shell command without filtering, allowing...

CVE-2019-11224

Modero AMX Code Execution CVE-2019-11224 This repo contains a few sources about CVE-2019–11224 https://link.medium.com/zukA0oCnV8 because I noticed that the link no longer works on the official NIST website. Modero AMX devices are essentially touch panel devices for meeting rooms, they can be...

CVE-2024-12270

CVE-2024-12270 Beautiful Taxonomy Filters = 2.4.3 - Unauthenticated SQL Injection Description The Beautiful taxonomy filters plugin for WordPress is vulnerable to SQL Injection via the 'selects0term' parameter in all versions up to, and including, 2.4.3 due to insufficient escaping on the user...

CVE-2023-23488-PoC

CVE-2023-23488-PoC Unauthenticated SQL Injection - Paid Memberships Pro 2.9.8 WordPress Plugin Running this script against a WordPress instance with Paid Membership Pro plugin tells you if the target is vulnerable. As the SQL injection technique required to exploit it is Time-based blind, instead...

CVE-2019-9053

CVE-2019-9053 Exploit - CMS Made Simple Unauthenticated SQL Injection SQLi An exploit script for CVE-2019-9053 , a critical unauthenticated SQL injection SQLi vulnerability in CMS Made Simple versions 2.2.9 and below. This tool leverages time-based SQL injection to extract admin credentials...

CVE-2026-14459-14460-pardus-software

Pardus Software Center — Local Privilege Escalation CVE-2026-14459 & CVE-2026-14460 Proof-of-concept and exploit-ready code for two local privilege escalation issues in the pardus-software package Pardus Software Center version 1.0.4 , both fixed in 1.0.5. CVE| Class| Summary| CVSS 3.1 CERT-TR...

NoFaxGiven

NoFaxGiven - Code Execution & Persistence in NETWORK SERVICE FAX Service A fax routing extension is a DLL that adds routing functionality to the fax service. Multiple fax routing extensions can reside on one server. When the fax server receives a fax transmission, it routes the received document...

CVE-2025-11391

Unauthenticated Blind SQL Injection in PPOM for WooCommerce = 33.0.15 This repository contains a Proof of Concept PoC for an unauthenticated time-based blind SQL Injection vulnerability in the "PPOM for WooCommerce" WordPress plugin, affecting versions up to and including 33.0.15. Vulnerability...

CVE-2026-36670

CVE-2026-36670 A time-based blind SQL injection exploit for the OpenSIPS Control Panel. This exploit abuses an authenticated sql injection vulnerability within the aliasmanagement.php module of opensips. The table GET parameter is improperly sanitized, allowing an attacker to inject a crafted...

log4j-quick-scan

log4j-quick-scan Scan your IP network and determine hosts with possible CVE-2021-44228 vulnerability in log4j library. There are far better and advanced tools for security audit, but many of them requires commercial penetration software or external, 3rd party service or software. This script is...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 Authenticated RCE Exploit Title: Frigate NVR = 0.16.3 - Authenticated Remote Code Execution Date: 2026-02-05 Exploit Author: jduardo2704 Vendor Homepage: https://frigate.video/ Software Link: https://github.com/blakeblackshear/frigate Version: = 0.16.3 CVE:...

CVE-2026-2035703-x300

CVE-2026-2035703: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Under coordinated disclosure 90-day embargo Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-2035703 Severity: Critical CVSS 9.8 CWE: CWE-78 OS Command...